profil ulpad problem

<?php
session_start();


if(!isset($_SESSION["username"]))
{
die("Bitte erst <a href=\"index.html\">einloggen");
}?>
<?php
$link = mysql_connect("localhost","knuff","pw") or die ("Keine Verbindung moeglich");
mysql_select_db("knuff") or die ("Die Datenbank existiert nicht")?>
<?php
if($_SERVER['REQUEST_METHOD'] == 'POST')
{
extract($_POST);
$aendern = "UPDATE profil SET username = '".mysql_escape_string($username)."', geb = '".mysql_escape_string($geb)."', ort = '".mysql_escape_string($ort)."', land = '".mysql_escape_string($land)."', icq = '".mysql_escape_string($icq)."', msn = '".mysql_escape_string($msn)."', hp = '".mysql_escape_string($hp)."', hobbys = '".mysql_escape_string($hobbys)."',
skype = '".mysql_escape_string($skype)."', email = '".mysql_escape_string($email)."', mich = '".mysql_escape_string($mich)."'
WHERE username = '".mysql_escape_string($username)."'";
$update = mysql_query($aendern) or die(mysql_error());
echo "
Die Daten wurden erfolgreich geändert.";
}
else
{
$user = $_SESSION["username"];
$abfrage = "SELECT * FROM profil WHERE username = '$user'";
$ergebnis = mysql_query($abfrage);
while ($row = mysql_fetch_object($ergebnis))
{
echo "
<form method=\"post\">
<table width=\"96%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">
<tr>
<td width=\"13%\">Name:</td>
<td width=\"28%\">$row->username</td>
</tr>
<tr>
<td>Geburtsdatum:</td>
<td><input type=\"text\" name=\"geb\" value=\"$row->geb\" /></td>
</tr>
<tr>
<td>Ort:</td>
<td><input type=\"text\" name=\"ort\" value=\"$row->ort\" /></td>
</tr>
<tr>
<td>Land:</td>
<td><input type=\"text\" name=\"land\" value=\"$row->land\" /></td>
</tr>
<tr>
<td></td>
<td></td>
</tr>
<tr>
<td>Kontakt:</td>
<td></td>
</tr>
<tr>
<td>E-Mail:</td>
<td><input type=\"text\" name=\"email\" value=\"$row->email\" /></td>
</tr>
<tr>
<td>Msn:</td>
<td><input type=\"text\" name=\"msn\" value=\"$row->msn\" /></td>
</tr>
<tr>
<td>Icq:</td>
<td><input type=\"text\" name=\"icq\" value=\"$row->icq\" /></td>
</tr>
<tr>
<td>Skype:</td>
<td><input type=\"text\" name=\"skype\" value=\"$row->skype\" /></td>
</tr>
<tr>
<td>Homepage:</td>
<td><input type=\"text\" name=\"hp\" value=\"$row->hp\" /></td>
</tr>
<tr>
<td>Hobbys:</td>
<td><textarea name=\"hobbys\" cols=\"10\" rows=\"3\">$row->hobbys</textarea></td>
</tr>
<tr>
<td>Über mich:</td>
<td><textarea name=\"mich\" cols=\"25\" rows=\"7\">$row->mich</textarea></td>
</tr>
</table>
<input type=\"submit\" name=\"Submit\" value=\"&Auml;ndern\" />
<input type=\"reset\" name=\"Submit2\" value=\"Zur&uuml;cksetzen\" />
</form>";
}
}
?>
<?php
$abfrage = "SELECT bild FROM profil WHERE username = '$user'";
$ergebnis = mysql_query($abfrage);
$pic = mysql_fetch_object($ergebnis);


echo "<center><form method=\"post\" action=\"\" enctype=\"multipart/form-data\" >
<table border=\"0\" cellpadding=\"0\" cellspacing=\"2\">
<tr >
<td>[img]admin/avatar/$pic->bild[/img]








</td>
<td><input type=\"file\" name=\"file1\" size=\"16\"></td>
</tr>
<tr >
<td></td>
<td><input type=\"submit\" value=\"Upload\"></td>
</tr>
</table>
</form>";


if($_FILES['file1']['tmp_name'] != "" and $_FILES['file1']['size'] < 102400)
{


$uploaddir = "admin/avatar/";
$user = $_SESSION["username"];
$dateiname = $_FILES['file1']['name'];




$eintragen = "UPDATE profil Set bild = '$dateiname' WHERE username = '$user'";
$austragen = mysql_query($eintragen) or die(mysql_error());


if(move_uploaded_file($_FILES['file1']['tmp_name'], $uploaddir.$_FILES['file1']['name']))
{
$dateipfad = $uploaddir.$dateiname;


echo "Datei wurde hochgeladen(".$dateipfad.").";
} else {
echo "Datei konnte nicht hochgeladen werden.";
}


}
else
{
echo "Die datei darf höchstens 100kb groß sein!
";
}
?>